Modify ↓
#23707 closed defect (fixed)
Remove basic auth information for openstreetmap.org
Reported by: | taylor.smock | Owned by: | team |
---|---|---|---|
Priority: | normal | Milestone: | 24.05 |
Component: | Core | Version: | |
Keywords: | Cc: |
Description
As of June 1st, OpenStreetMap has disabled OAuth 1.0a and Basic Auth.
We need to do the following:
- If the user is using basic auth AND the current API server is OSM.org, then we need to reset the
osm-server.auth-method
preference AND clearosm-server.username
andosm-server.password
.- We were allowing users to continue using basic auth while it worked; it no longer does.
- Show the user a message that they need to reauth (maybe just MOTD?)
Attachments (1)
Change History (6)
comment:1 by , 3 months ago
comment:2 by , 3 months ago
- I've got a POC for that in the preferences cleanup section. I'm also ensuring that users won't accidentally re-enable basic auth on OSM.org in preferences.
- I was mostly inclined towards just the MOTD since that means we don't have to wait for translators. I'm thinking it would be a good idea to put off this months release until I apply a patch for this ticket (hopefully today). I should have done this earlier; it isn't like this was a surprise.
by , 3 months ago
Attachment: | 23707.patch added |
---|
Disable basic auth for osm.org, remove username/password from preferences on startup, don't allow users to use basic auth with osm.org api
comment:5 by , 3 months ago
Milestone: | → 24.05 |
---|
Note:
See TracTickets
for help on using tickets.
1) Can probably simply done in the old preferences cleanup section.
2) MOTD should be enough. They anyway will notice and reauth, if we tell them or not. Point 1 is more important.